Repository navigation
Expanded redaction rules: core 0.85.0 - #388
Merged
Merged
Conversation
…le catalog - Names (zh/en) for every new built-in redaction rule, and the 20 new rule groups (kinds) in core's order; the old api-keys / personal kinds are gone. - Descriptions for the new matcher shapes (prefixes with tail charset, saved, assignment, labeled) and for each rule core checks in code; position rules state which part is replaced. - Hits of "Credentials saved in ThinkWatch" show where the value is saved (upstream key, gateway key, proxy password, ...) in the security log, the traffic badge tip and the CSV export, never a value. - Core with these types is not released yet: provisional types live in src/security/api.provisional.ts and shadow the generated ones from src/types.ts until the next core pin. - Screenshot mocks use the new kinds. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Core now sends each rule's Chinese name (name_zh), the Chinese reason (why_zh), what a redaction rule matches (about / about_zh, backticks mark code) and the groups of each guard (kinds) in display order. - Rule tables, the rule dialog, the security log, hit details, the request drawer and the traffic badges show these, by UI language, with English as the fallback. Places that only have a rule id look it up in the rule list (shared cache with the security page); before it loads they show the English name from the log, then the id. - Removed the UI's own rule name, reason, group and redaction matcher tables. The dangerous-command check texts stay. core.zh.json keeps scan_rule, rule_why, content_rule and secret_rule: core message templates and the Rust notifications still read them. - Provisional types gain the new fields until the next core pin. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Core v0.85.0 (control API 56). The generated bindings now carry the expanded redaction catalog, so the provisional types are gone. - System notifications take built-in rule names from core's catalog, and a record-only hit of "Credentials saved in ThinkWatch" says where the credential is saved, never any part of its value. - core.zh.json drops the redaction rule name table. The rule name and reason tables that core messages still read stay, and a test keeps them identical to core's catalog. - Screenshot fixtures regenerated against v0.85.0. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pins core v0.85.0 (control API 56) and brings the Secrets & privacy page up to its expanded redaction catalog.
Checked locally: tsc, vitest, cargo fmt, cargo clippy --all-targets, cargo test (including control_plane against the v0.85.0 twcore, msg_codes and ts_bindings).
🤖 Generated with Claude Code